It is vital that the KEYS file is only referred to using a URL of the form

https://downloads.apache.org/incubator/<podling>/KEYS [1]

This applies to VOTE emails as well as download pages.

Why is this?

KEYS files must remain available long for as long as a release is
still available from the ASF archives.

It is also important for the files used in a VOTE to correspond as far
as possible with the ones that will be used by downloaders.
(Obviously, that is not possible for the artifacts themselves as they
cannot be published until after the vote). Furthermore, it is
important that the KEYS file remain available after the vote has
completed, in case there is a need to check any aspects of the vote.

==

If your podling uses a template to create the vote email, please check
that it uses the correct URL for the KEYS file, and fix it if not.
Also check any developer docs to ensure the correct URL is used.

Note: for a podling's first release, it is possible that the relevant
directory under https://dist.apache.org/repos/dist/release/incubator/
has yet to be created. This will need to be created, and the KEYS file
populated, *before* the vote can begin. [It will be needed anyway once
the vote succeeds]

Thanks,
Sebb
[1] Some older pages may use
https://www.apache.org/dist/incubator/<podling>/KEYS
This now redirects to https://downloads.apache.org/incubator/<podling>/KEYS

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Reply via email to